Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sDyXva9p0ijq06xm4b8SLBKgXc4.roa
File: sDyXva9p0ijq06xm4b8SLBKgXc4.roa (raw, json)
Hash identifier: 8p40mZxEcY8/JdwoadHa0KP0Lz0P7Xt8FNY+h6VuOqg=
Subject key identifier: B0:3C:97:BD:AF:69:D2:28:EA:D3:AC:66:E1:BF:12:2C:12:A0:5D:CE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A141E046DB8FC4A7B38E66E4EABEF51109
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sDyXva9p0ijq06xm4b8SLBKgXc4.roa
Signing time: Thu 15 Oct 2026 23:22:59 +0000
ROA not before: Thu 15 Oct 2026 23:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197363
IP address blocks: 191.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:e0:46:db:8f:c4:a7:b3:8e:66:e4:ea:be:f5:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 23:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b03c97bdaf69d228ead3ac66e1bf122c12a05dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:03:47:2b:e5:d6:8b:b3:2d:40:0f:2c:d3:
e5:c8:de:49:97:11:83:82:3a:86:3f:1e:5e:05:bf:
6c:e0:81:9b:27:d8:9a:e4:27:41:80:6a:ab:f5:01:
f6:20:5e:2d:f7:1a:92:ee:98:77:ea:5c:50:aa:fe:
33:81:66:8b:f2:4a:15:a7:da:eb:46:10:dc:84:02:
4b:09:de:74:3f:b2:6d:ab:ba:b3:65:9b:15:78:73:
e4:8f:fa:1a:4b:8c:97:63:17:5b:b7:5d:35:4e:39:
18:cf:a8:69:6a:ec:b9:b9:24:51:cd:4c:dc:1f:1f:
7e:52:4f:db:54:61:6b:00:bc:0d:4f:34:9a:36:20:
d1:4f:22:19:8b:f9:b1:12:10:ac:6d:90:07:b7:b5:
39:ad:07:2b:f7:43:41:e0:d7:bc:2d:95:9b:46:a5:
d8:56:9e:38:d8:f3:ad:4b:e2:98:51:a9:d6:bc:a2:
97:7b:88:4a:b7:6e:f5:95:19:3f:7c:58:a9:ca:2f:
c5:43:ae:08:02:f8:63:0d:07:67:d7:11:af:5b:2c:
fc:2f:b9:0f:d6:e4:63:83:8b:c0:3e:05:47:f4:22:
dc:d9:98:6d:09:50:fa:2c:02:ba:ca:3d:24:be:fb:
b7:fb:73:50:50:bf:6e:64:ea:67:f4:5f:81:b4:88:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:97:BD:AF:69:D2:28:EA:D3:AC:66:E1:BF:12:2C:12:A0:5D:CE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sDyXva9p0ijq06xm4b8SLBKgXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
76:80:16:5e:9a:fa:59:32:b1:d8:bd:5b:d0:a8:e9:ee:41:09:
6e:13:f1:5d:cd:cb:20:09:a3:3b:00:e2:ab:74:7f:05:07:88:
ca:ee:eb:d1:a9:47:dd:e2:aa:ab:e3:58:06:d6:a0:26:74:a7:
65:d7:ac:10:8c:b6:d0:07:f2:f9:b5:26:ff:f2:87:79:d9:a3:
a3:45:6a:24:12:58:59:e0:08:f1:a4:67:ee:e1:02:5d:84:50:
19:72:4d:d7:d6:7f:39:83:4c:d0:68:2e:d9:ac:15:a7:ad:1b:
ec:d9:40:5e:52:b1:f0:85:e9:8b:06:f7:3a:28:d3:ed:a8:a2:
56:05:f6:00:c8:70:63:61:ef:5c:0d:00:3d:da:6d:63:4d:93:
6c:f3:d5:d9:d8:9a:8b:de:51:8e:b6:3f:3d:c8:c2:f1:e5:5d:
34:0f:d2:e4:2e:1e:f6:4c:3c:ac:4e:0a:da:9c:b0:db:33:dd:
a1:da:7d:10:35:45:58:06:fc:b9:da:7f:9a:13:ae:5b:36:3b:
c1:dc:0e:49:5b:3e:cb:09:43:a5:28:78:b9:b1:67:e7:86:4f:
f0:75:1a:d8:87:57:84:2b:78:ca:f9:2b:eb:e6:b6:f3:51:07:
54:32:b8:2f:51:03:38:2c:d2:b0:fb:9a:c1:8b:c7:f4:7a:d9:
ae:85:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:22 2026 by rpki-client